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(54) 



(57) An information broadcasting method, a receiv- 
er, and an information processing apparatus make it 
possible to secure safety of information transmission 
between an information center and information. By en- 
crypting confirmation information with a method making 
it possible to decipher the confirmation information only 



in the information terminal that becomes its receiver 
when an information center transmits the contents of the 
response signal (S30) transmitted from the information 
terminal (9) to the information center {3, 22) as the con- 
firmation information, it becomes possible to secure 
safety of information transmission between the informa- 
tion center and information terminal. 
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Description 

[0001 ] The present invention relates to an information 
broadcasting method and more particularly, is, for ex- 
ample, suitably applied to an information broadcasting s 
method for a digital satellite broadcasting system. 
[0002] This kind of digital satellite broadcasting sys- 
tems realize multiple channel broadcasting of approxi- 
mately 100-channel broadcasting by compress-coding 
multiple channels of program data and by multiplexing 10 
and transmitting the compress-coded data in accord- 
ance with moving picture experts group (MPEG) 2 meth- 
od as a compress-coding method for the program data. 
[0003] Such digital satellite broadcasting systems 
provide various interactive broadcasting services for is 
viewers by multiplication of channels. Among these in- 
teractive broadcasting services, there is a shopping 
service for enabling viewers to enjoy shopping at their 
own homes by selecting and purchasing desired goods 
from goods information displayed on TV broadcasting, 20 
viewers and providers are connected through ground 
networks such as telephone networks in mutual direc- 
tions, that is, in both upward and downward directions. 
Hence, safety of communication is required to secure. 
[0004] As what realizes safe communication in inter- 25 
active broadcasting with using this ground network, IT 
Vision is considered. In the IT Vision, a.center, which is 
isolated from the internet, is located for connecting the 
center and viewers, as well as the center and broadcast- 
ing station through telephone networks, and the broad- 30 
casting station and sellers respectively through private 
lines. Thereby, viewers, broadcasting station and sellers 
can respectively communicate with each other. 
[0005] In addition, as what secures the safety of com- 
munication in a ground "network using the Internet, se- 35 
cure electronic transaction (SET) is considered. In the 
SET, masquerade as viewers and tapping are prevented 
by using cryptography, such as an open key cryptograph 
system. 

[0006] In the above-described IT Vision, there is no 40 
possibility of hacking from the internet. However, since 
anyone in the network itself can easily know the tele- 
phone number of the access point, which is a node of 
the viewers and center, he could analyze a protocol with 
access to its access point. Therefore, the IT Vision has 45 
a problem on the safety of communication. 
[0007] In addition, in the above-described SET, as an 
authentic station needs to be provided for authenticating 
each viewer by giving the viewer a user identification 
(ID) so as to realize the cryptography, there is a problem so 
that the configuration should be more complicated. 
[0008] In view of the foregoing, an object of this inven- 
tion is to provide an information broadcasting method, 
in which the safety of information transmission between 
an information center, and information terminals can be ss 
secured. 

[0009] The foregoing object and other objects of the 
invention are addressed by the provision of an informa- 



tion broadcasting method, a receiver and an information 
processing apparatus. 

[0010] In the information broadcasting method, an in- 
formation center executes service processing according 
to response information by transmitting predetermined- 
response information based on a program sent from the 
information center to an information terminal. Wherein, 
the information center encrypts confirmation information 
based on the response information with using an en- 
cryption method inherent to the information terminal 
transmitting the response information, and transmits the 
information to the information terminal. Further, the in- 
formation terminal receiving the confirmation informa- 
tion deciphers the confirmation information, and judges 
whether the confirmation information corresponds to the 
contents of the response information. 
[001 1] Also in the present invention, the mutual direc- 
tion service system executes mutual direction service 
processing corresponding to the received response in- 
formation in the broadcasting station by transmitting 
predetermined response information from a receiver to 
the broadcasting station corresponding to a mutual di- 
rection service program transmitted from the broadcast- 
ing station. Wherein, a receiver is provided Further, the 
receiver comprises receiving means for receiving a con- 
firmation information corresponding to the response in- 
formation transmitted after encryption from the broad- 
casting station, detachable storing means for storing re- 
ceiver identification information, and deciphering means 
for deciphering codes of the received confirmation infor- 
mation with using the received identification information 
stored in the storing means. 

[0012] Further, in the present invention, the informa- 
tion processing apparatus in the broadcasting station for 
receiving predetermined response information accord- 
ing to the mutual direction service program from the re- 
ceiver, and for executing mutual direction service 
processing according to the received response informa- 
tion comprises storing means for storing encryption in- 
formation corresponding to each plurality of receiver 
identification information, reading means for reading en- 
cryption information corresponding to the receiver iden- 
tification information contained in the received response 
information, encryption means for encrypting confirma- 
tion information based on the read encryption informa- 
tion, and transmitting means for transmitting encrypted 
confirmation information to the receiver transmitting the 
response information. 

[0013] Embodiments of the invention will now be de- 
scribed, by way of example only, with reference to the 
accompanying drawings in which: 

Fig. 1 is a block diagram showing the configuration 
of a digital satellite broadcasting system according 
to a first example embodiment of the present inven- 
tion; 

Fig. 2 is a schematic diagram showing a procedure 
of goods purchase processing according to the first 
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embodiment; 

Fig. 3 is a block diagram showing the configuration 
of a digital satellite broadcasting system according 
to a second example embodiment; and 
Fig. 4 is a schematic diagram showing a procedure 
of goods 

Fig. 4 is a schematic diagram showing a procedure 
of goods purchase processing according to the sec- 
ond embodiment. 

[0014] Preferred embodiments of this invention will be 
described with reference to the accompanying draw- 
ings: 

(1) First Embodiment 

[0015] In Fig. 1, symbol 1 generally shows a digital 
satellite broadcasting system according to a first em- 
bodiment. A transmitting system 3 of a broadcasting sta- 
tion transmitting multiple channels of broadcasting 
waves to a communication satellite 2, reproduces a 
channel of program data S1 ^ which is recorded in a vid- 
eo tape recorder (VTR) 4 n , and outputs the data S1 n 
to an encoder 5 1V The encoder 5 1t performs compres- 
sive encoding on the program data Sl^ by the MPEG 
2 method, and outputs obtained encoded data 82^, to 
a multiplex scrambler 6^ . 

[0016] In the same way, encoded data S2 12 -S2 1M , 
which are respectively obtained by compressive encod- 
ing a predetermined number of program data among 
plural channels of program data, are inputted respec- 
tively to the multiplex scrambler 6 V The multiplex 
scrambler 6., generates a bit stream by performing time 
division multiplex processing on these encoded data 
S2 12 -S2 1M , and scrambles the stream so as to output 
multiplex data S31 , which is obtained as its result, to a 
modulator 7 V 

[0017] The modulator 7, digitally modulates the mul- 
tiplex data S3-, based on a predetermined modulation 
system, and supplies a resulted transmission signal S4, 
to a parabola antenna B. In the same way, transmission 
signals S4 2 -S4 N which are generated by multiplexing a 
predetermined number of codes after performing re- 
spectively compressive encoding on program data of 
the rest of the channels, are also supplied to the parab- 
ola antenna 8 respectively. 

[0018] Thereby, electric waves corresponding to the 
transmission signals S4 r S4 N are emitted from the pa- 
rabola antenna 8 toward the communication satellite 2, 
and are transmitted to' an intelligent receiver and decod- 
er (IRD) 9 in a house of a viewer via transponders (not 
shown) provided in the communication satellite 2 at the 
transmission channel corresponding to the number of 
transponders. 

[0019] The IRD 9 inputs a reception signal S5, which 
is received by a parabola antenna 10, to a demodulator 
1 1 . By the way, in the IRD 9, when the viewers operates 
an operation key of a remote commander 1 2, an infrared 



signal IR1 is outputted from the remote commander 1 2. 
Further, an infrared radiation (IR) receiver 1 3 receives 
this infrared signal IR1 in order to output an infrared re- 
ception signal S6, which is the result of receiving the 

5 infrared signal, to a system controller 1 4. 

[0020] The system controller 14 controls the entire 
system, and generates a control signal S7 from the in- 
frared reception the signal S6 in order to output the sig- 
nal S6 to the demodulator 11. The demodulator 11 se- 

10 lects a desired transmission channel among the recep- 
tion signals S5 based on the control signal S7, and gen- 
erates multiplex data by digitally demodulating the sig- 
nal S7 according to a predetermined demodulation sys- 
tem. Furthermore, the demodulator 1 1 extracts encoded 

'5 data S8 of a desired channel instructed by the viewers, 
among this multiplex data, and outputs this to a de- 
scrambler 15. 

[0021] By the way, an integrated circuit (IC) card 16 
has key data for canceling scramble. The system con- 

20 troller 14 reads the key data S9 from the IC card 16, 
generates a scramble-canceling signal S10 based on 
the key data S9, and outputs the signal S10 to the de- 
scrambler 15. The descrambler 1 5 cancels the scramble 
on the encoded data S8 based on the supplied scram- 

25 ble-canceling signal S10, and outputs encoded data 
S11 obtained as its result, to a decoder 36. 
[0022] The decoder 36 performs decompression de- 
coding on the encoded data S11 , and outputs obtained 
program data S1 2 to a display and interaction block 1 7. 

30 The display and interaction block 17 displays images, 
corresponding to the program data S12, on a television 
(TV) screen by outputting this program data S1 2 to a TV 
set 1 8. In this manner, by selecting a channel broadcast- 
ing a shopping service program with the remote com- 

35 mander 12, viewers can view/listen to the program for 
shopping. That is, this enables viewers to obtain the 
state of shopping at home. 

[0023] In this state, if the viewer selects the desired 
goods from goods information displayed on the TV 

40 screen, an infrared signal IR2 corresponding to contents 
of the instruction is outputted from the remote com- 
mander 1 2. The IR receiver 1 3 receives this infrared sig- 
nal IR2, and outputs the obtained infrared reception sig- 
nal S1 3, to the system controller 14. The system con- 

45 troller 14 generates a goods selection signal S14 from 
the infrared reception signal S1 3, and outputs this to the 
display and interaction block 17. 
[0024] The display and interaction block 1 7 generates 
order information such as an identification number at- 

so tached to the goods to be ordered (hereinafter, this is 
called a goods ID number), and quantity, based on the 
supplied goods selection signal S14. By the way, the IC 
card 1 6 has a peculiar IC card number. Ttien, the display 
and interaction block 17 reads the IC card number IN 

55 from the IC card 16 through the system controller 14. 
Then, the block 17 generates a goods purchase signal 
S1 5, which is obtained by pairing the IC card number IN 
and the generated order information, and outputs this to 
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a communication block 1 9. The communication block 1 9 
modulates this goods purchase signal S15 with a pre- 
determined modulation system, and outputs a goods 
purchase signal S16, which is obtained as its result, to 
a protocol converter 21 through the telephone network 5 
20. 

[0025] The protocol converter 21 converts the goods 
purchase signal S16 into the internet protocol, and out- 
puts an obtained goods purchase signal S17 to a con- 
troller 23 of a payment server 22. This controller 23 is 10 
made to control the entire system of the payment server 

22, and outputs the supplied goods purchase signal S1 7 
to an inventory confirmation block 24, a credit inquiry 
block 25, and purchase confirmation block 26. The in- 
ventory confirmation block 24 generates an inventory is 
confirmation signal S18 from the goods purchase signal 
S17, and confirms inventory of the goods, which is or- 
dered, by giving the signal S1S to a selling system 27. 
[0026] The credit inquiry block 25 inquires viewer's/ 
audience's credit corresponding to a credit card number 20 
CN by accessing to a credit card information block 28 
based on the IC card number which is shown by the 
goods purchase signal S1 7 supplied from the controller 

23, and by reading the credit card number CN corre- 
sponding to the I C card number, and by giving this to a 25 
credit payment system 30 through a credit inquiry sys- 
tem 29. 

[0027] When the goods purchase signal S17 is sup- 
plied from the controller 23, the purchase confirmation 
block 26 generates only a number for identifying the or- 30 
der (hereinafter, this is called an order ID number) so as 
to be stored in a memory. At the same time, the pur- 
chase confirmation block 26 generates a message for 
confirming viewer's purchase intention (hereinafter this 
is called a confirmation request message) in order to 35 
output these order ID number and confirmation request 
message, together with order information and IC card 
number contained in the goods purchase signal S1 7, as 
a confirmation information signal S1 9, to a customer 
management system 31 in the transmitting system 3. *o 
[0028] The customer management system 31 stores 
encryption keys, which are different every IC card 
number, respectively in a memory. After reading an en- 
cryption key corresponding to the IC card number of the 
confirmation information signal S19 supplied from the 45 
memory, the system 31 outputs the encryption key, or- 
der ID number, order information, and confirmation re- 
quest message which are contained in the confirmation 
information signal "SI 9, as an encrypted information sig- 
nal S20to an entitlement management message (EMM) so 
generator and encryptor 32: 

[0029] The EMM generator and encryptor 32 gener- 
ate an EMM message S21 based on the supplied en- 
crypted information signal S20 by encrypting the order 
ID number, order information, and confirmation request ss 
message with using the encryption key corresponding 
to the IC card number, and output the message S21 to 
an EMM repeater 33. Thereby, the EMM generator and 



encryptor 32 can generate the EMM message S21 that 
can be deciphered only by the IC card 1 6 corresponding 
to the IC card number, and prevent from tampering and 
fabrication of order information, and masquerade as a 
viewer. The EMM repeater 33 is for transmitting repeat- 
edly the EMM message S21 during a certain period of 
time. Hence, the EMM repeater 33 repeatedly outputs 
the EMM message S21 to the multiplex scramblers 6 r 
' 6 N respectively 
[0030] The multiplex scramblers 6^ generates a bit 
stream by performing time division multiplex processing 
on the encoded data S2 ir S2 1M and EMM message 
S21 , as well as scrambles the bit stream in order to out- 
put obtained multiplexed-data S22^ to a modulator 7 t . 
The modulator 7 1 digitally modulates the muttiplexed- 
data S22 1 based on a predetermined modulation sys- 
tem, and supplies an obtained transmission signal S23 1 
to the parabola antenna 8. Transmission signals S232- 
S23 N , which are obtained in the same way, are also sup- 
plied respectively to the parabola antenna 8. 
[0031] Thus, electric waves corresponding to the 
transmission signals S23 1 -S23 N are emitted from the 
parabola antenna 8 toward the communication satellite 
2 respectively, and are transmitted to the IRD 9 in trans- 
mission channels according to the number of transpond- 
ers through the transponders provided in the communi- 
cation satellite 2. 

[0032] The IRD 9 inputs a reception signal S24, re- 
ceived by the parabola antenna 10, to a demodulator 
11. The demodulator 11 selects a desired transmission 
channel in the reception signal S24, based on the con- 
trol signal S7 supplied from the system controller 14. 
Further, the demodulator 11 digitally demodulates the 
signal, and thereafter extracts the EMM message S25 
corresponding to the channel, which is viewed, to output 
this to an EMM decoder 34. 

[0033] By the way, the IC card 16 stores a decoding 
key corresponding to the IC card number, that is, a de- 
coding key corresponding to the encryption key when 
generating the EMM message S21 in the transmission ' 
system 3, in a memory. The system controller 14 reads 
the decoding key K corresponding to the IC card number 
of the IC card 16 from the IC card 16, and supplies the 
decoding key K to the EMM decoder 34. 
[0034] The EMM decoder 34 decodes the EMM mes- 
sage S25 with using the decoding key K supplied from 
the system controller 1 4, and outputs an obtained mes- 
sage S26 to the display and interaction block 17. In this 
manner, as the EMM message S25 can be decoded only 
with the decoding key K corresponding to the IC card 
number, tampering and fabrication of order information 
and masquerade as a viewers can be prevented from. 
The display and interaction block 17 displays the con- 
firmation request message according to the message 
S26 on the TV screen by outputting the message S26 
to the TV set 18. 

[0035] In this state, the viewers visually confirms the 
confirmation request message displayed on the TV 
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screen. If this confirmation request message is correct, 
he/she performs instruction of purchase confirmation 
with the remote commander 12. The IR receiver 13 re- 
ceives an infrared signal IR3 according, to contents of 
the instruction supplied from the remote commander 1 2, 
and outputs an infrared reception signal S27 to the sys- 
tem controller 14. The system controller 14 generates a 
confirmation instruction signal S28 from this infrared re- 
ception signal S27, and outputs signal S28 to the display 
and interaction block 17. 

[0036] The display and interaction block 17 outputs 
the order ID number and order information in the mes- 
sage S26, and the IC card number IN, which is read from 
the IC card 16 through the system controller 1 4, as an 
order confirmation signal S29 to the communication 
block 1 9. The communication block 1 9 generates an or- 
der confirmation signal S30 by modulating this order 
confirmation signal S29 with predetermined modulation 
system, and outputs S30 to the protocol converter 21 
through the telephone network 20. 
[0037] The protocol converter 21 converts the order 
confirmation signal S30 into the internet protocol, and 
outputs an obtained order confirmation signal S31 to a 
purchase settlement block 35 through the controller 23 
of the payment server 22. The purchase settlement 
block 35 can compare the order ID number ON when 
ordering with the order ID number at the timing of pur- 
chase confirmation by reading the order ID number ON 
stored in a memory in the purchase confirmation block 
26, through the controller 23, and by confirming whether 
the order ID number ON coincides with the order ID 
number of the order confirmation signal S31 . Hence, the 
masquerade as a viewer can be prevented If they coin- 
cide with each other, the purchase settlement block 35 
not only makes arrangement for goods delivery by gen- 
erating a purchase settlement signal S32 from the order 
confirmation signal S31 and by outputting S31 to the 
selling system 27 : and records the contents of prepara- 
tion in a transaction (not shown) to perform processing 
on reservation of inventory, actual goods delivery, re- 
covery of the charge, and the like thereafter. 
[0038] Procedure of goods purchase processing in 
the above-described configuration will be described with 
reference to Fig. 2. The selling system 27 produces a 
shopping service program, which is broadcast, and 
records the program in a desired VTR4 among VTRs 
4 11 -4 NM of the transmission system 3 as program data. 
The transmission system 3 generates transmission sig- 
nals S4 r S4 N by performing predetermined data 
processing on program data reproduced from the VTRs 
4 nAiM. Thereafter, the selling system 27 emits electric 
waves corresponding to the transmission signals S4 1 - 
S4 N to the communication satellite 2 in order to transmit 
the transmission signals S4 1 -S4 N to the IRD 9 through 
the transponders of the communication satellite 2. 
[0039] In the IRD 9, when the viewers selects a chan- 
nel providing a shopping service, he/she can view/listen 
to the shopping service program with images of the pro- 



gram being displayed on the TV screen. In this state, in 
the IRD 9, when the viewers selects desired goods from 
the goods information displayed on the TV screen, the 
goods purchase signal S16 composed of its order infor- 

s mation and the IC card number of the IC card 16 is out- 
putted to the protocol converter 21 . 
[0040] The protocol converter 21 converts the goods 
purchase signal S1 6 into the internet protocol, and out- 
puts an obtained goods to the payment server 22. The 

10 payment server 22 generates an inventory confirmation 
signal S18 from the goods purchase signal S17, and 
confirms the inventory of the goods to be ordered, by 
giving S1 8 to the selling system 27. 
[0041] In addition, the payment server 22 inquires the 

*5 viewer's credit corresponding to the credit card number 
CN by detecting the I C card number from the goods pur- 
chase signal S17 and by supplying the credit card 
number CN corresponding to the IC card number with 
the credit payment system 30 through the credit inquiry 

20 system 29. 

[0042] Successively, the payment server 22 gener- 
ates the order ID number and confirmation request mes- 
sage, and outputs these order ID number and confirma- 
tion request message together with the order informa- 

25 tion and IC card number in the goods purchase signal 
S17, to the transmission system 3 as a confirmation in- 
formation signal S19. 

[0043] The transmission system 3 generates the 
EMM message S21 by encrypting the order ID number, 

30 order information, and confirmation request message 
based on the supplied confirmation information signal 
S19, with using the encryption key corresponding to the 
IC card number Subsequently, the transmission system 
3 generates transmission signals S23 1 -S23 N by per- 

35 forming digital modulation after multiplexing the EMM 
message S21 with the program data, and transmits 
electric waves according to these transmission signals 
S23 r S23 N tothelRD9. 

[0044] The IRD 9 generates a message S26 by de- 
40 coding the EMM message S25 in the reception signal 
S24 with using the decoding key K corresponding to the 
IC card number, and displays a confirmation request 
message according to the message S26 on the TV 
screen. In this state, when the viewers instructs pur- 
45 chase confirmation, the IRD 9 generates an order con- 
firmation signal S30 composed of the order ID number, 
order information, and I C card number, and outputs S30 
to the protocol converter 21 through the telephone net- 
work 20. 

so [0045] The protocol converter 21 converts the order 
confirmation signal S30 into the Internet protocol, and 
outputs an obtained order confirmation signal S31 , to 
the payment server 22. The payment server 22 makes 
preparation for goods delivery by generating a purchase 

55 settlement signal S32 from the order confirmation signal 
S31 and supplying S32 to the selling system 27. In ad- 
dition, the payment server 22 generates a message 
showing completion of preparation for goods (hereinaf- 
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ter, this is called a goods preparation message), and 
outputs the message with the !C card number to the 
transmission system 3. 

[0046] The transmission system 3 generates a goods 
preparation encrypted-message by encrypting the 
goods preparation message with using the encryption 
key corresponding to the IC card number Subsequently, 
the transmission system 3 generates transmission sig- 
nals according to the number of transponders by per- 
forming digital modulation after the transmission system 
3 multiplexing this goods preparation encrypted-mes- 
sage with program data, and transmitting these trans- 
mission signals to the IRD 9. 

[0047] The IRD 9 informs the viewers of completion 
of goods preparation by generating a goods preparation 
message by decoding the received preparation encrypt- 
ed-message, with using the decoding key K correspond- 
ing to the IC card number and displaying a message ac- 
cording to the goods preparation message on the TV 
screen. 

[0048] Furthermore, the payment server 22 calcu- 
lates the purchase charge of the goods by reading the 
contents of goods preparation that is recorded in the 
transaction, and informs the transmission system 3 of 
this. The transmission system 3 informs the credit pay- 
ment system 30 of the charge that is obtained by adding 
a TV view/listening charge to this goods purchase 
charge. Receiving this, the credit payment system 30 
demands the total charge of these goods purchase 
charge and TV view/listening charge of the viewers. The 
viewer pays the goods purchase charge and TV view/ 
listening charge to the credit payment system 30. The 
credit payment system 30 pays the goods purchase 
charge and TV view/listening charge, which is paid, to 
the transmission system 3. The transmission system 3 
pays the goods purchase charge to the selling system 
27 after recovering only the TV view/listening charge 
from this. The selling system 27 recovers the goods pur- 
chase charge, and sends out the goods to the viewers. 
[0049] Accordingtothe above configuration, the order 
information and confirmation request message, which 
are transmitted from the transmission system 3 to the 
I RD 9 through the communication satellite 2 are encrypt- 
ed in order to be decoded only by a specific IC card 16. 
Thereby, performing masquerade and tapping by a in- 
vader can be prevented by identifying the viewer with 
an existing IC card 16. Hence, the safety of communi- 
cation in simple configuration can be secured. 

(2) Second Embodiment 

[0050] In Fig. 3 where the same symbols are assigned 
to the same parts as in Fig. 1, symbol 50 generally 
shows a digital satellite broadcasting system according 
to a second embodiment. The broadcasting system ac- 
cording to the second embodiment has the same con- 
figuration as the digital satellite broadcasting system 1 
according to the first embodiment, except for the con- 



figuration of an IRD 51 and a payment server 52. 
[0051] In this case, a viewers should make a contract 
of enabling her/him to view/listen to a channel broad- 
casting a shopping service beforehand (hereinafter, this 
5 is called a viewer's registration). When such viewer's 
registration is applied, the customer information man- 
agement bbck 53 of the payment server 52 issues a 
user ID/password corresponding to this viewers, and 
registers this user ID/password and an IC card number 
w of an I C card, which this viewers possesses, as a pair. 
Furthermore, the customer information management 
block 53 outputs these user ID/password and IC card 
number corresponding to the user ID/password to the 
customer management system 31 in the transmission 
75 system 3 as a viewers registration signal S50. 

[0052] The customer management system 31 reads 
an encryption key corresponding to the IC card number 
of the viewers registration signal S50 from its internal 
memory, and outputs this encryption key and the user 
20 ID/password to the EMM generator and encryptor 32 as 
a viewers registration signal S51. The EMM generator 
and encryptor 32 encrypts the user ID/password from 
the viewers registration signal S51, which is supplied, 
with the encryption key, and outputs a viewers registra- 
rs tion encrypted-message S52, which is obtained as its 
result, to the EMM repeater 33. The EMM repeater 33 
repeatedly outputs the viewers registration encrypted- 
message S52 to the multiplex scramblers 6^-6^ respec- 
tively. 

30 [0053] The multiplex scramblers 6^ not only performs 
time division multiplex processing on the encoded data 
S2 ir S2 1M and viewer's registration encrypted-mes- 
sage S52, but also scrambles them to output obtained 
multiplexed-data S53^, to a modulator 7 V The modula- 

3s tor7 1 digitally modulates the multiplexed data 553^ and 
supplies an obtained transmission signal SS4^ to the pa- 
rabola antenna 8. Transmission signals S542-S54 N gen- 
erated in the same way are also supplied respectively 
to the parabola antenna 8. Owing to this, electric waves 

40 corresponding to the transmission signals S54 1 -S54 N 
are emitted from the parabola antenna 8 toward the 
communication satellite 2 respectively, and are trans- 
mitted to the IRD 51 through the transponders provided 
in the communication satellite 2. 

45 p054] The IRD 51 inputs a reception signal S55, 
which is received by the parabola antenna 10, to a de- 
modulator 11. The demodulator 11 extracts a viewers 
registration encrypted-message S56 by performing pre- 
determined data processing to the reception signal S55, 

so which is received, based on the control signal S7 sup- 
plied from the system controller 54, and outputs this to 
the EMM decoder 34. 

[0055] The EMM decoder 34 decodes the viewers 
registration encrypted-message S56 with using the de- 
55 coding key K supplied through the system controller 54, 
and outputs the obtained user ID/password UP to the 
display and interaction block 17. The system controller 
54 reads the user ID/password UP from the display and 
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interaction block 17 and stores it in flash memory 55. 
Owing to this, viewer's registration is completed. 
[0056] Subsequently, a case that a viewer performs 
shopping with viewing a shopping service program will 
be described. In the IRD 51 , when the viewers selects 
the desired goods, from goods information displayed on 
a TV screen, with watching the shopping service pro- 
gram, the display and interaction block 1 7 generates its 
order information based on the goods selection signal 
S 1 4 supplied from the system controller 54. At the same 
time, the display and interaction block 17 reads the IC 
card number IN from the IC card 16 through the system 
controller 54 in order to output the goods purchase sig- 
nal S15 composed of these order information and IC 
card number to the encryptor 56. 
[0057] The encryptor 56 reads the user ID/password 
UP from the flash memory 55 through the system con- 
troller 54. Thereafter, the encryptor 56 encrypts the user 
ID/password UP and the order information with the us- 
ing IC card number so as to output the encrypted one 
and the user ID to the communication block 19 as a 
goods purchase encrypted-signal S57. The communi- 
cation block 19 modulates the goods purchase encrypt- 
ed-signal S57 with a predetermined modulation system, 
and outputs an obtained goods purchase encrypted-sig- 
nal S58 to the protocol converter 21 through the tele- 
phone network 20. 

[0058] The protocol converter 21 converts the goods 
purchase encrypted-signal S58 into the Internet proto- 
col, and outputs an obtained goods purchase encrypt- 
ed-signal S59 to a controller 57 of the payment server 
52. The controller 57 controls the entire payment server 
52, and outputs the supplied goods purchase encrypt- 
ed-signal S59 to a customer information management 
block 53, a decipherer 58 : an authentication block 59, 
the inventory confirmation block 24, credit inquiry block 
25 and purchase confirmation block 26. 
[0059] The customer information management block 
53 searches an IC card number corresponding to the 
user ID with using the user ID of the goods purchase 
encrypted-signal S59 as a key, and outputs IC card 
number to the decipherer 58 through the controller 57. 
The decipherer 58 obtains the user I D/password and or- 
der information by deciphering a part, which is included 
in the goods purchase encrypted-signal S59 and is en- 
crypted, with the supplied IC card number. 
[0060] The authentication block 59 confirms whether 
the user ID/password, which is deciphered by the deci- 
pherer 58, coincides with the user ID/password, which 
is registered in the customer information management 
block 53. If a coincidence is confirmed, the inventory 
confirmation block 24 generates an inventory confirma- 
tion signal S18 from the order information, and confirms 
the ordered inventory of the goods by giving S1 8 to the 
selling system 27. 

[0061] The purchase confirmation block 26 generates 
an order ID number and stores it in a memory and also 
generates a confirmation request message. Then, the 



block 26 outputs the order ID number and confirmation 
request message together with the IC card number cor- 
responding to the order information and user ID, as a 
confirmation information signal S19 to the customer 
5 management system 31 in the transmission system 3. 
[0062] The transmission system 3 generates an EMM 
message S21 by encrypting the order ID number, order 
information, and confirmation request message with us- 
ing the encryption key corresponding to the IC card 

10 number based on the confirmation information signal 
S19. Subsequently, the transmission system 3 gener- 
ates transmission signals S23 1 -S23 N by performing dig- 
ital modulation after the transmission system 3 multi- 
plexes this EMM message S21 with program data, and 

is transmits electric waves according to these transmis- 
sion signals S23 1 -S23 N to the IRD 51. 
[0063] The IRD 51 generates the message S26 by de- 
coding the EMM message S25 in the reception signal 
S24, which is received, with using the decoding key K 

20 corresponding to the IC card number, and displays a 
confirmation request message according to the mes- 
sage S26 on the TV screen. In the IRD 51, when the 
viewers instructs purchase confirmation, the display and 
interaction block 17 generate an order confirmation sig- 

25 nal S60, which comprises information showing confir- 
mation of order contents (hereinafter, this is called order 
confirmation information), the order ID number, order in- 
formation, and IC card number, and outputs order con- 
firmation signal S60 to the encryptor 56. 

30 [0064] When the order confirmation signal S60 is sup- 
plied, the encryptor 56 reads the user ID/password UP 
from the flash memory 55 through the system controller 
54. Then, the encryptor 56 encrypts the user ID/pass- 
word, order confirmation information, order ID number, 

35 and order information with the IC card number, and out- 
puts the encrypted one and the user ID as an order con- 
firmation encrypted-signal S61 to the communication 
block 19. The communication block 19 modulates the 
order confirmation encrypted-signal S61 with a prede- 

40 termined modulation system, and outputs an order con- 
firmation encrypted-signal S62, which is obtained as its 
result, to the protocol converter 21 through the tele- 
phone network 20. 

[0065] The protocol converter 21 converts the order 
45 confirmation encrypted-signal S62 into the internet pro- 
tocol, and outputs an order confirmation encrypted-sig- 
nal S63, which is obtained as its result, to a controller 

57 of the payment server 52. This controller 57 outputs 
the order confirmation encrypted-signal S63, which is 

50 supplied, to the customer information management 
block 53, decipherer 58, authentication block 59, credit 
inquiry block 25 and purchase settlement block 35. 
[0066] The customer information management block 
53 searches an IC card number corresponding to the 

55 user ID with using the user ID of the order confirmation 
encrypted-signal S63 as a key, and outputs this to the 
decipherer 58 through the controller 57. The decipherer 

58 obtains the user ID/password, order ID number and 
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order information by deciphering a part, which is includ- 
ed in the order confirmation encrypt ed-signal S63 and 
is encrypted with the supplied IC card number. 
[0067] The authentication block 59 confirms whether 
the user ID/password deciphered by the decipherer 58, s 
coincides with the user ID/password, which is registered 
in the customer information management block 53. If a 
coincidence is confirmed the credit inquiry block 25 
reads the IC card number IN corresponding to the user 
ID/password from the customer information manage- 10 
ment block 53. Then, the credit card number CN corre- 
sponding to the IC card number IN is read by accessing 
to the credit card information block 28. Thereby, the 
credit inquiry block 25 inquires the viewer's credit cor- 
responding to the credit card number CN, and giving this is 
to the credit payment system 30 through the credit in- 
quiry system 29. 

[0068] After that, the purchase settlement block 35 
reads the order ID number ON, which is stored in the 
memory in the purchase confirmation block 26, through 20 
the controller 57. Further, the purchase settlement block 
35 confirms whether the order ID number ON at the time 
of ordering and the order ID number at the time of pur- 
chase confirmation coinciding with each other. If they 
coincide, the purchase settlement block 35 makes prep- 25 
aration for goods delivery by generating a purchase set- 
tlement signal S32 and outputting this to the selling sys- 
tem 27. At the same time, the purchase settlement block 
35 also records the contents of preparation in the trans- 
action to perform thereafter reservation of the inventory, 30 
actual goods delivery, recovery of the charges, and the 
like. 

[0069] Here, a procedure of goods purchase process- 
ing according to above configuration will be described 
with reference to Fig. 4 showing the corresponding parts 35 
assigned to the same symbols as in Fig. 2. When view- 
er's registration are made, the payment server 52 gen- 
erates a user ID/password corresponding to the apply- 
ing viewer, and outputs the user ID/password and the 
IC card number of the I C card 16, which the viewers pos- 
sesses, to the transmission system 3 as a viewers reg- 
istration signal S50. 

[0070] The transmission system 3 generates a view- 
ers registration encrypted-message S52 by encrypting 
the user ID/password with an encryption key corre- 45 
sponding to the I C card number based on the viewers 
registration signal S50. Subsequently, the transmission 
system 3 generates transmission signals S54 r S54 N by 
performing digital modulation after multiplexing this 
viewers registration encrypted-message S52 with the so 
program data, and transmits electric waves correspond- 
ing to these transmission signals S54, -S54 N to the IRD 
51. 

[0071] The- IRD 51 decodes the viewers registration 
encrypted-message S56 in the reception signal S55, ss 
which is received, with the decoding key K correspond- 
ing to the IC card number, and stores the user ID/pass- 
word, which is obtained as its result, in the flash memory 



55. 

[0072] By the way, the selling system 27 produces a 
shopping service program, which is broadcast, and 
records this in a desired VTR4 among VTRs 4 11 -4 NM of 
the transmission system 3 as program data. The trans- 
mission system 3 generates transmission signals S4 1 - 
S4 N by performing predetermined data processing on 
program data played back from the VTRs 4 11 -4 NM , and 
thereafter emits electric waves corresponding to these 
transmission signals S4 r S4 N toward the communica- 
tion satellite 2 to transmit them to the IRD 51 through 
the transponders of the communication satellite 2. 
[0073] In the IRD 51, when the viewers selects the 
shopping service program, the viewers can view/listen 
to the shopping service program by displaying images 
of the program on the TV screen. In this state, when the 
viewers selects desired goods in the goods information 
displayed on the TV screen, the IRD 51 encrypts the 
order information and the user ID/password with the IC 
card number. Then, the encrypted order information and 
the user ID are outputted as a goods purchase encrypt - 
ed-signal S58 to the protocol converter 21 . 
[0074] The protocol converter 21 converts the goods 
purchase encrypted-signal S58 into the internet proto- 
col, and outputs a goods purchase encrypted-signal 
S59, which is obtained as its result, to the payment serv- 
er 52. The payment server 52 obtains the user ID/pass- 
word and order information by deciphering a part, which 
is included in the goods purchase encrypted-signal S59 
and is encrypted, with the IC card number correspond- 
ing to the user ID. Then, the payment server 52 gener- 
ates the inventory confirmation signal S18 from the or- 
der information, and confirms the ordered inventory of 
the goods by giving S18 to the selling system 27. 
[0075] Subsequently, the payment server 52 gener- 
ates the order ID number and stores it in a memory, and 
also generates a confirmation request message. Then, 
the order ID number and confirmation request message 
are outputted together with the order information and IC 
card number, to the transmission system 3 as a confir- 
mation information signal S19. 
[0076] The transmission system 3 generates the 
EMM message S21 by encrypting the order ID number, 
order information, and confirmation request message 
based on the confirmation information signal S19, which 
is supplied, with using the encryption key corresponding 
to the IC card number. Subsequently, the transmission 
system 3 generates transmission signals S23 1 -S23 N by 
performing digital modulation after multiplexing this 
EMM message S21 with the program data, and trans- 
mits electric waves according to these transmission sig- 
nals S23 1 -S23 N to the IRD 51. 
[0077] The IRD 51 generates the message S26 by de- 
coding the EMM message S25 in the reception signal 
S24, which is received, with using the decoding key K 
corresponding to the IC card number, and displays a 
confirmation request message according to the mes- 
sage S26 on the TV screen. In this state, when the view- 
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er instructs purchase confirmation, the I RD 51 encrypts 
the user ID/password, order confirmation information, 
order ID number, and order information by the IC card 
number. Then, the encrypted ones and the user ID are 
outputted as an order confirmation encrypted-signal 
S62 to the protocol converter 21 through the telephone 
network 20. The protocol converter 21 converts the or- 
der confirmation encrypted-signal S62 into the internet 
protocol, and outputs an order confirmation encrypted- 
signal S63, which is obtained as its result, to the pay- 
ment server 52. 

[0078] The payment server 52 obtains the user ID/ 
password, order ID number, and order information by 
deciphering the part, which is included in the goods pur- 
chase encrypted-signal S63 and is encrypted, with the 
IC card number corresponding to the user ID Further- 
more, the payment server 52 inquires the viewer's/au- 
dience's credit by supplying the credit card number CN 
corresponding to the user I D/password to the credit pay- 
ment system 30 through the credit inquiry system 29. 
[0079] Subsequently, the payment server 52 makes 
preparation for goods delivery by generating a purchase 
settlement signal S32 and supplying S32 to the selling 
system 27. In addition, the payment server 52 generates 
a goods preparation message, and outputs this with the 
IC card number to the transmission system 3. 
[0080] The transmission system 3 generates a goods 
preparation encrypt ed-message by encrypting the 
goods preparation message with using the encryption 
key corresponding to the IC card number. Subsequently, 
the transmission system 3 generates transmission sig- 
nals according to the number of transponders by per- 
forming digital modulation after the transmission system 
3 multiplexes this goods preparation encrypted-mes- 
sage with the program data, and transmits these trans- 
mission signals to the IRD 51 . 
[0081] The IRD 51 informs the viewers of completion 
of goods preparation by generating the goods prepara- 
tion message by decoding the received goods prepara- 
tion encrypted-message with using the decoding key K 
corresponding to the IC card number I and displaying a 
message according to the goods preparation message 
on the TV screen. 

[0082] Furthermore, the payment server 52 calcu- 
lates the goods purchase charge by reading the con- 
tents of goods preparation recorded in the transaction, 
and informs the transmission system 3. The transmis- 
sion system 3 informs the credit payment system 30 of 
the charge that is obtained by adding a TV view/listening 
charge to this goods purchase charge. Receiving this, 
the credit payment system 30 demands the total charge 
of these goods purchase charge and TV watching 
charge of the viewers. The viewer pays the goods pur- 
chase charge and TV view/listening charge to the credit 
payment system 30. The credit payment system 30 pays 
the goods purchase charge and TV view/listening 
charge, which are paid, to the transmission system 3. 
The transmission system 3 pays the goods purchase 



charge to the selling system 27 after recovering only the 
TV view/listening charge from this. The selling system 
27 recovers the goods purchase charge, and sends out 
the goods to the viewers. 

5 [0083] According to the above configuration , the order 
information and confirmation request message, which 
are transmitted from the transmission system 3 to the 
IRD 51 through the communication satellite 2, can be 
encrypted in order to be decoded only by a specific IC 

to card 1 6. Further, order information and confirmation re- 
quest message, which are transmitted from IRD 51 to 
the payment server 52 through telephone network 20 
can be encrypted in order to be decoded only by an I C 
card number of a specific IC card 16. Thereby, hacking 

*5 by performing masquerade and tapping through authen- 
ticating a viewer can be prevented from with identifying 
the viewer with using an existing IC card 1 6. Hence, the 
safety of communication can be secured with such a 
simple configuration. 

20 

(3) Other Embodiments 

[0084] Note that, in the above-described first and sec- 
ond embodiments, the inventory confirmation block 24 

25 confirming the inventory of the goods to be ordered is 
provided in the payment server 22 or 52. However, the 
present invention is not limited to this, and the payment 
server can be constructed without the inventory confir- 
mation block 24. 

30 [0085] Furthermore, in the above-described first and 
second embodiments, the EMM message S21 is trans- 
mitted to the IRD 9 or 51 through the transponders of 
the communication satellite 2. However, the present in- 
vention is not limited to this, and information that is ob- 

35 tained by encrypting the order ID number, order infor- 
mation, and confirmation request message can be 
transmitted through a ground network such as the tele- 
phone network 20. 

[0086] Moreover, in the above-described first and 
40 second embodiments, the present invention is applied 
to the digital satellite broadcasting system 1 or 50 pro- 
viding a shopping service program. However, the 
present invention is not limited to this, and the present 
- invention can be widely applied to television broadcast- 
's ing apparatuses providing interactive broadcasting- 
service. 

[0087] In addition, in the above-described first and 
second embodiments, the present invention is applied 
to the transmission system 3 and payment server 22 or 

50 52. However, the present invention is not limited to this, 
and in brief, the present invention can be applied to in- 
formation centers, where encrypting confirmation infor- 
mation is processed based on predetermined response 
information, which is transmitted from an information 

55 terminal, with an encryption method inherent to the in- 
formation terminal which transmits the response infor- 
mation, to the information terminal. 
[0088] Furthermore, in the above-described first and 
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second embodiments, the present invention is applied 
to the I RD 9 or 51 . However, the present invention is not 
limited to this, and in brief, the present invention can be 
applied to information terminals each of which deciphers 
received confirmation information, and judges whether . s 
the information coincides with the contents of response 
information. 

[0089] In this manner, according to the present inven- 
tion, when an information center transmits the contents 
of a response signal transmitted from an information ter- 10 
minal, as confirmation information, to the information 
terminal, the confirmation information is encrypted with 
a certain method that can be deciphered only by the in- 
formation terminal. Thereby, the safety of information 
transmission between the information center and infor- is 
mation terminal can be secured. 
[0090] While there has been described in connection 
with the preferred embodiments of the invention, it will 
be obvious to those skilled in the art that various chang- 
es and modifications may be aimed, therefore, to cover 20 
in the appended claims all such changes and modifica- 
tions as fall within the true spirit and scope of the inven- 
tion. 



Claims 

1 . An information broadcasting method for an informa- 
tion center executing a service processing accord- 
ing to predetermined response information by 30 
transmitting said response information according to 

a program, which is transmitted from said informa- 
tion center to an information terminal, from said in- 
formation terminal to said information center, said 
information broadcasting method, wherein: 35 

said information center encrypts confirmation 
information based on said response informa- 
tion with using an inherent encryption method 
corresponding to said information terminal, and 40 
• transmitting said confirmation information to 
said information terminal; and 
said information terminal which receives said 
confirmation information, deciphers said confir- 
mation information. 45 

2. The information broadcasting method according to 
claim 1 , wherein 

said response information includes identifica- 
tion information for identifying said information ter- so 
minal. 

3. The information broadcasting method according to 
claim 1, wherein: 

ss 

Said information terminal transmits second re- 
sponse information corresponding to said con- 
firmation information to said information center; 



and 

said information center encrypts second confir- 
mation information corresponding to said sec- 
ond response information with an inherent en- 
cryption method corresponding to said informa- 
tion terminal which transmits said response in- 
formation and transmits said second confirma- 
tion information to said information terminal. 

4. The information broadcasting method according to 
claim 2, wherein 

said information terminal has a detachable IC 
card, and said identification information being an IC 
card number stored in said IC card. 

5. The information broadcasting method according to 
claim 1, wherein: 

said information terminal encrypts said re- 
sponse information with an inherent encryption 
method for said information terminal, and trans- 
mits said encrypted response information to 
said information center; and 
said information center which receives said en- 
crypted response information, deciphers said 
response information with an inherent deci- 
phering method corresponding to said informa- 
tion terminal. 

6. The information broadcasting method according to 
claim 5, wherein 

said information terminal has a detachable IC 
card and encrypts said response information with 
identification information stored in said IC card. 

7. The information broadcasting method according to 
claim 6, wherein 

said response information includes a user ID 
and a password, and encrypting said response in- 
formation with IC card number stored in said IC 
card. 

8. The information broadcasting method according to 
claim 7, wherein 

said user ID and password are issued by said 
information center before accepting said service in 
said information terminal, and are stored in said in- 
formation terminal. 

9. The information broadcasting method according to 
claim 1, wherein: 

said information center multiplexes said confir- 
mation information on broadcasting signals and 
transmits the resultant to said information ter- 
minal; and 

said information terminal transmits said re- 
sponse information via public telephone net- 
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work to said information center 

10. The information broadcasting method according to 
claim 9, wherein: 

5 

said information terminal transmits second re- 
sponse information for said confirmation infor- 
mation via said public telephone network to 
said information center; and 
said information center multiplexes second 10 
confirmation information corresponding to said 
second response information on broadcasting 
signals and transmits the resultant to said infor- 
mation terminal. 

is 

1 1 . A receiver used in a mutual direction service system 
for executing a mutual direction service processing 
corresponding to said response information in a 
broadcasting station by transmitting a predeter- 
mined response information from said receiver to so 
said broadcasting station corresponding to a mutual 
service program transmitted from said broadcasting 
station, said receiver comprising: 

receiving means for receiving confirmation in- 25 
formation for said response information which 
is transmitted from said broadcasting station af- 
ter encryption; 

storing means which is designed detachable for 
storing receiver identification information; and 30 
deciphering means for deciphering codes of 
said received confirmation information with us- 
ing said receiver identification information 
stored in said storing means. 

35 

12. The receiver according toclaim 11 , further compris- 
ing 

transmitting means for transmitting said re- 
sponse information corresponding to said mutual ■ 
service program after including said receiver iden- *o 
tification information. 

13. The receiver according to claim 1 1 , wherein: 

said transmitting means transmits second re- 45 
sponse information corresponding to said con- 
firmation information; 

said receiving means is designed to receive 
said second confirmation information corre- 
sponding to said second response information so 
transmitted from said broadcasting station after 
encryption; and 

said deciphering means is designed to deci- 
pher codes of said second confirmation infor- 
mation. 55 

1 4. The receiver according to claim 1 1 , further compris- " 
ing: 



an encryption means for encrypting said re- 
sponse information with using said receiver 
identification information wherein; 
said transmitting means transmits encrypted 
response information to said broadcasting sta- 
tion. 

15. The receiver according to claim 11, wherein 

said receiving means is designed to separate 
said confirmation information multiplexed on broad- 
casting signals. 

16. The receiver according to claim 11, wherein 

said transmitting means transmits said re- 
sponse information via public telephone network to 
said broadcasting station. 

17. An information processing apparatus in a broad- 
casting station for receiving predetermined re- 
sponse information corresponding to said mutual 
direction service program from a receiver, and for 
executing mutual direction service processing cor- 
responding to said received response information, 
said information processing apparatus, comprising: 

storing means for storing encrypted information 
corresponding to every plurality of said receiver 
identification information; 
reading means for reading out said encrypted 
information corresponding to said receiver 
identification information contained in said re- 
ceived response information from said storing 
means; 

encrypting means for encrypting confirmation 
information based on said read encrypted infor- 
mation; and 

transmitting means for transmitting said en- 
crypted confirmation information to said receiv- 
er which transmits said response information. 

18. The information processing apparatus according to 
claim 17, wherein; 

information except for said receiver identifica- 
tion information contained in said response in- 
formation is encrypted and transmits from said 
receiver; and further comprising 
deciphering means for deciphering codes en- 
crypted on said response information with us- 
ing said receiver identification information con- 
tained in said response information. 

19. The information processing apparatus according to 
claim 17, wherein 

said transmitting means multiplexes said con- 
firmation information on broadcasting signals, and 
transmits the resultant. 
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20. The information processing apparatus according to 
claim 19, wherein 

said transmitting means transmits said confir- 
mation information repeatedly. 
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